What is a control objective?

A control objective is a statement of a desired result or purpose to be achieved by implementing

controls within a particular business activity. Controls are implemented through policies,

organizational structures, processes, practices and procedures, and through technical systems.

A control objective can be stated in response to specific business requirements for control, or it can

be a generic "good practice" statement that should be applied to all businesses.

Example from NIST 800-53 r4, page 2 :

NIST 800-53 revision 4, "provides a set of privacy controls based on international standards and best practices that help organizations enforce privacy requirements derived from federal legislation, directives, policies, regulations, and standards."